{"id":8875,"date":"2022-09-13T17:22:25","date_gmt":"2022-09-13T16:22:25","guid":{"rendered":"https:\/\/telecomkh.info\/?p=8875"},"modified":"2022-09-13T17:22:25","modified_gmt":"2022-09-13T16:22:25","slug":"retail-industry-was-the-second-most-targeted-industry-by-ransomware-in-2021-sophos-survey-finds","status":"publish","type":"post","link":"https:\/\/telecomkh.info\/?p=8875","title":{"rendered":"Retail industry was the second most targeted industry by ransomware in 2021, Sophos survey finds"},"content":{"rendered":"

77% of retail organizations were hit with ransomware, up from 44% in 2020\u2014a 75% rise<\/strong><\/p>\n

Sophos, a global leader in next-generation cybersecurity, published a new sectoral survey report, The State of Ransomware in Retail 2022, which found that retail had the second highest rate of ransomware attacks last year of all sectors surveyed after the media, leisure, and entertainment industry. Globally, 77% of retail organizations surveyed were hit\u2014a 75% increase from 2020. This is also 11% more than the cross-sector average attack rate of 66%.
\n\u201cRetailers continue to suffer one of the highest rates of ransomware attacks of any industry. With more than three in four suffering an attack in 2021, it certainly brings a ransomware incident into the category of when, not if. In Sophos\u2019 experience, the organizations that are successfully defending against these attacks are not just using layered defenses, they are augmenting security with humans trained to monitor for breaches and actively hunting down threats that bypass the perimeter before they can detonate into even bigger problems. This year\u2019s survey shows that only 28% of retail organizations targeted were able to stop their data from being encrypted, suggesting that a large portion of the industry needs to improve their security posture with the right tools and appropriately trained security experts to help manage their efforts,\u201d said Chester Wisniewski, principal research scientist, Sophos.
\nAs the percentage of retail organizations attacked by ransomware increased, so did the average ransom payment. In 2021, the average ransom payment was $226,044, a 53% increase when compared to 2020 ($147,811). However, this was less than one-third the cross-sector average ($812K).
\n\u201cIt\u2019s likely that different threat groups are hitting different industries. Some of the low-skill ransomware groups ask for $50,000 to $200,000 in ransom payments, whereas the larger, more sophisticated attackers with increased visibility demand $1 million or more,\u201d said Wisniewski. \u201cWith Initial Access Brokers (IABs) and Ransomware-as-a-Service (RaaS), it\u2019s unfortunately easy for bottom-rung cybercriminals to buy network access and a ransomware kit to launch an attack without much effort. Individual retail stores and small chains are more likely to be targeted by these smaller opportunistic attackers,\u201d said Wisniewski.<\/p>\n

Additional findings include:
\n\u2022 While the retail sector was the second most targeted industry, the perceived increase in the volume and complexity of cyberattacks against the industry were slightly below the cross-sector average (55% and 55% respectively)
\n\u2022 92% of retail organizations hit by ransomware said the attack impacted their ability to operate and 89% said the attack caused their organization to lose business\/revenue
\n\u2022 In 2021, the overall cost to retail organizations to remediate a ransomware attack was $1.27M, down from $1.97M in 2020
\n\u2022 When compared to 2020, the amount of data recovered after paying the ransom decreased (from 67% to 62%), as did the percentage of retail organizations that got all their data back (from 9% to 5%)<\/p>\n

In the light of the survey findings, Sophos experts recommend the following best practices for all organizations across all sectors:
\n\u2022 Install and maintain high-quality defenses across all points in the environment. Review security controls regularly and make sure they continue to meet the organization\u2019s needs
\n\u2022 Proactively hunt for threats to identify and stop adversaries before they can execute attacks \u2013 if the team lacks the time or skills to do this in-house, outsource to a Managed Detection and Response (MDR) team
\n\u2022 Harden the IT environment by searching for and closing key security gaps: unpatched devices, unprotected machines and open RDP ports, for example. Extended Detection and Response (XDR) solutions are ideal for this purpose
\n\u2022 Prepare for the worst, and have an updated plan in place of a worst-case incident scenario
\n\u2022 Make backups, and practice restoring them to ensure minimal disruption and recovery time<\/p>\n

The State of Ransomware in Retail 2022 survey polled 5,600 IT professionals in mid-sized organizations across 31 countries, including 422 respondents from the retail sector.<\/span><\/p>\n

Above, Chester Wisniewski, principal research scientist, Sophos \/ image credited to Sophos<\/em><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

77% of retail organizations were hit with ransomware, up from 44% in 2020\u2014a 75% rise Sophos, a global leader in next-generation cybersecurity, published a new sectoral survey report, The State of Ransomware in Retail 2022, which found that retail had the second highest rate of ransomware attacks last year of all sectors surveyed after the … <\/p>\n

Continue reading \u00abRetail industry was the second most targeted industry by ransomware in 2021, Sophos survey finds\u00bb<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":8877,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[24],"tags":[],"_links":{"self":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/8875"}],"collection":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8875"}],"version-history":[{"count":1,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/8875\/revisions"}],"predecessor-version":[{"id":8878,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/posts\/8875\/revisions\/8878"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=\/wp\/v2\/media\/8877"}],"wp:attachment":[{"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8875"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8875"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/telecomkh.info\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8875"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}